Add REUSE-WP-0023 for the access-engine source rename

Residual handoff from FLEX-WP-0020 (flex-auth -> access-engine). Forge ID 42
and the repo UUID are unchanged, and runtime names stay flex-auth per
FLEX-DEC-2026-013, so this is a federation-source-coordinate change only.

Both tasks start in wait: the forge rename has not landed (access-engine
raw index returns 404, flex-auth still resolves), and flipping the URL early
would drop an enabled publish-passing source from the composed index.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 4609@bnt-lap001
Assistant-Session: 085df492-f02a-4fe6-acad-2aa52789fe1b

registry/indexes/federated.yaml

@@ -1,7 +1,7 @@
 # Composed federated capability index. Regenerate with:
 # reuse-surface federation compose
 version: 1
-updated: '2026-09-06'
+updated: '2026-09-20'
 domain: helix_forge
 collision_policy: warn
 sources:
@@ -37,10 +37,6 @@ sources:
   count: 0
   url: https://forgejo.coulomb.social/coulomb/citation-work/raw/main/registry/indexes/capabilities.yaml
   cache: registry/federation/cache/citation-work.yaml
-- repo: commerce-canon
-  count: 2
-  url: https://forgejo.coulomb.social/coulomb/commerce-canon/raw/main/registry/indexes/capabilities.yaml
-  cache: registry/federation/cache/commerce-canon.yaml
 - repo: config-atlas
   count: 1
   url: https://forgejo.coulomb.social/coulomb/config-atlas/raw/main/registry/indexes/capabilities.yaml
@@ -66,7 +62,7 @@ sources:
   url: https://forgejo.coulomb.social/coulomb/evidence-anchor/raw/main/registry/indexes/capabilities.yaml
   cache: registry/federation/cache/evidence-anchor.yaml
 - repo: evidence-binder
-  count: 0
+  count: 2
   url: https://forgejo.coulomb.social/coulomb/evidence-binder/raw/main/registry/indexes/capabilities.yaml
   cache: registry/federation/cache/evidence-binder.yaml
 - repo: evidence-source
@@ -97,6 +93,10 @@ sources:
   count: 1
   url: https://forgejo.coulomb.social/coulomb/human-resources/raw/main/registry/indexes/capabilities.yaml
   cache: registry/federation/cache/human-resources.yaml
+- repo: commerce-canon
+  count: 2
+  url: https://forgejo.coulomb.social/coulomb/commerce-canon/raw/main/registry/indexes/capabilities.yaml
+  cache: registry/federation/cache/commerce-canon.yaml
 - repo: ihp-railiance-probe
   count: 0
   url: https://forgejo.coulomb.social/coulomb/ihp-railiance-probe/raw/main/registry/indexes/capabilities.yaml
@@ -162,7 +162,7 @@ sources:
   url: https://forgejo.coulomb.social/coulomb/ops-bridge/raw/main/registry/indexes/capabilities.yaml
   cache: registry/federation/cache/ops-bridge.yaml
 - repo: ops-hub
-  count: 0
+  count: 1
   url: https://forgejo.coulomb.social/coulomb/ops-hub/raw/main/registry/indexes/capabilities.yaml
   cache: registry/federation/cache/ops-hub.yaml
 - repo: ops-warden
@@ -589,6 +589,49 @@ capabilities:
   source_repo: whynot-design
   source_url: https://forgejo.coulomb.social/coulomb/whynot-design/raw/main/registry/indexes/capabilities.yaml
   source_index: registry/federation/cache/whynot-design.yaml
+- id: capability.evidence.binding
+  name: Evidence-to-Target Binding
+  summary: Links evidence items to structured targets with relation, status, and confidence
+    metadata, bidirectional queries, active-state coordination, and canonical engine
+    events.
+  vector: D3 / A2 / C3 / R3
+  domain: infotech
+  status: draft
+  owner: evidence-binder
+  path: registry/capabilities/capability.evidence.binding.md
+  tags:
+  - evidence
+  - binding
+  - evidence-link
+  - form-field
+  - citation-evidence
+  consumption_modes:
+  - source module
+  - React provider
+  source_repo: evidence-binder
+  source_url: https://forgejo.coulomb.social/coulomb/evidence-binder/raw/main/registry/indexes/capabilities.yaml
+  source_index: registry/federation/cache/evidence-binder.yaml
+- id: capability.evidence.rect-registry
+  name: Visual-Guide Rect Registry
+  summary: Coordinates field, evidence-card, and highlight rectangles from independent
+    renderers so an SVG overlay can draw the active visual guide without polling.
+  vector: D3 / A2 / C3 / R3
+  domain: infotech
+  status: draft
+  owner: evidence-binder
+  path: registry/capabilities/capability.evidence.rect-registry.md
+  tags:
+  - rect-registry
+  - visual-guide
+  - overlay
+  - active-state
+  - citation-evidence
+  consumption_modes:
+  - source module
+  - React component
+  source_repo: evidence-binder
+  source_url: https://forgejo.coulomb.social/coulomb/evidence-binder/raw/main/registry/indexes/capabilities.yaml
+  source_index: registry/federation/cache/evidence-binder.yaml
 - id: capability.feature-control.evaluate
   name: Feature Availability Evaluation
   summary: Evaluate whether a feature is active, hidden, disabled, or unavailable
@@ -920,8 +963,8 @@ capabilities:
   source_index: registry/federation/cache/hub-core.yaml
 - id: capability.infotech.issue-tracking
   name: Universal Issue Tracking Coordination
-  summary: Unified Python/CLI interface for issue tracking across Gitea, GitHub, and
-    GitLab, preventing direct platform API usage and credential sprawl for coordinating
+  summary: Unified Python/CLI interface for issue tracking across Forgejo, GitHub,
+    and GitLab, preventing direct platform API usage and credential sprawl for coordinating
     agents.
   vector: D4 / A2 / C2 / R1
   domain: infotech
@@ -1017,6 +1060,26 @@ capabilities:
   source_repo: phase-memory
   source_url: https://forgejo.coulomb.social/coulomb/phase-memory/raw/main/registry/indexes/capabilities.yaml
   source_index: registry/federation/cache/phase-memory.yaml
+- id: capability.operations.ops-hub
+  name: Operations Hub Extension Contract
+  summary: Versioned hub-extension package and bootstrap client for operational truth,
+    service-catalog records, readiness evidence, and migration gates.
+  vector: D3 / A1 / C1 / R1
+  domain: operations
+  status: reviewed
+  owner: ops-hub
+  path: registry/capabilities/capability.operations.ops-hub.md
+  tags:
+  - operations
+  - service-catalog
+  - readiness
+  - hub-extension
+  consumption_modes:
+  - contract package
+  - command-line bootstrap
+  source_repo: ops-hub
+  source_url: https://forgejo.coulomb.social/coulomb/ops-hub/raw/main/registry/indexes/capabilities.yaml
+  source_index: registry/federation/cache/ops-hub.yaml
 - id: capability.ops.tunnel-bridge
   name: SSH Reverse Tunnel Lifecycle Manager (ops-bridge)
   summary: CLI that manages named SSH reverse tunnels keeping remote execution environments
@@ -1244,10 +1307,9 @@ capabilities:
   source_index: registry/federation/cache/reuse-surface.yaml
 - id: capability.security.iam-tooling-suite
   name: NetKingdom Security/IAM Tooling Suite
-  summary: Dynamic, self-optimizing security platform for Kubernetes-deployed IT infrastructure;
-    owns canonical IAM/security standards and executable conformance tooling (IAM
-    profile conformance, playbook capability contract validation, security bootstrap
-    console).
+  summary: Canonical security architecture and executable reference tooling for IAM,
+    bootstrap, posture validation, deterministic plan-only security scenario composition,
+    and proposal-only posture feedback.
   vector: D3 / A2 / C1 / R1
   domain: infotech
   status: draft